What’s New
Workflows, Reviews and Attestation Approval workflows and scheduled reviews for security policies, with configurable approvers and deadlines.
Details here: [TODO link]
Templates Ready-made templates for compliance packages, internal controls, security policies.
Details here: Feature - Compliance, Control and Policies Templates
Notifications - Slack and Teams Notifications have been migrated to the new UI and can now be delivered directly to Slack and Microsoft Teams channels or users. Connectors are configured centrally in Settings.
Details here: Feature - Notifications Migration & Slack Integration
Bugs
| Issue | Summary |
|---|---|
| ERA-2073 | Fix attachment deletion errors in Online Assessment |
| ERA-2067 | Enforce unique email addresses for non-admin accounts |
| ERA-2064 | Show icon and name for dynamic status columns by default |
| ERA-2062 | APIv2: document audit_periodical.frequency values for SecurityService |
| ERA-2060 | Support PATCH for partial updates in the new API |
| ERA-2058 | Audit LDAP connector “In Use” relations and unblock deletion of stale connectors |
| ERA-2057 | Allow bearer token authentication for all non-local users |
| ERA-2048 | Bug - Users Settings visualizations |
| ERA-2002 | LDAP sync fails silently when one active LDAP group no longer exists |
| ERA-1997 | Bug - Access Tokens creation date is wrong |
| ERA-1995 | Enable control design customisation in Community Edition |
| ERA-1987 | Incident Stages should show the stage name on the shortcut |
| ERA-1963 | SaaS update must invalidate user sessions exactly once per deployment |
| ERA-1960 | There is no way for community users to know what the latest image tag is |
| ERA-1945 | Bug - Issues shortcut on Internal Controls shows all issues instead of the linked ones |
| ERA-1936 | LDAP bind failure leaks global error handler into queue worker and breaks subsequent jobs |
| ERA-1927 | SMTP STARTTLS must trust private CAs installed in the system CA store |
| ERA-1852 | Warning notification not triggered |
| ERA-1805 | Deleting packages should use worker |
| ERA-1737 | Feature - Allow upload emails as attachments |
| ERA-1539 | Bug - Current status on IC is not assigned correctly |
| ERA-1510 | Missing inline field validation for “Specific dates” when saving Internal Control without audit date |
| ERA-1451 | Feature - Update of Internal Controls import template |
| ERA-1406 | Bug - Tags field removed from old community installs |
| ERA-1385 | Feature - Handle deletion when items have related items |
| ERA-1276 | Bug - Policy download pdf wrong updated by |
| ERA-1100 | Feature - Some translations Missing/Improvements |
| ERA-1065 | Bug - Adding custom field on first tab of compliance analysis |
| ERA-1040 | Feature - OAuth SMTP Auth Method |
| ERA-960 | Feature - More relative dates on dynamic statuses |
| ERA-938 | Bug - Wording / Translation of the dynamic status condition is misleading |